@orkestrel/scaffold 0.0.77 → 0.0.78

package/dist/src/core/index.cjs

@@ -4,7 +4,7 @@ let _orkestrel_template = require("@orkestrel/template");
 let _orkestrel_emitter = require("@orkestrel/emitter");
 var package_default = {
 	name: "@orkestrel/scaffold",
-	version: "0.0.77",
+	version: "0.0.78",
 	description: "Scaffold workspaces with commands: new, audit, repair, catalog, and overwrite.",
 	keywords: [
 		"audit",
@@ -25,6 +25,7 @@ var package_default = {
 		"dist/src",
 		"dist/bin",
 		"dist/host",
+		"dist/agents",
 		"README.md"
 	],
 	type: "module",
@@ -60,56 +61,59 @@ var package_default = {
 		"copy": "node -e \"const fs=require('node:fs'),p=require('node:path'),a=process.argv[1],b=process.argv[2];fs.mkdirSync(p.dirname(b),{recursive:true});fs.cpSync(a,b,{force:true});console.log('Copied: '+a+' to '+b)\"",
 		"scaffold": "node ./dist/bin/main.js",
 		"lint": "oxlint --config .oxlintrc.json --fix .",
-		"check": "tsc --noEmit --project tsconfig.json && npm run check:src",
+		"check": "tsc --noEmit --project tsconfig.json && npm run check:src && npm run check:skills",
 		"check:src": "npm run check:src:core && npm run check:src:server && npm run check:src:bin",
 		"check:src:core": "tsc --noEmit -p configs/src/tsconfig.core.json",
 		"check:src:server": "tsc --noEmit -p configs/src/tsconfig.server.json",
 		"check:src:bin": "tsc --noEmit -p configs/src/tsconfig.bin.json",
+		"check:skills": "tsc --noEmit -p configs/agents/tsconfig.skills.json",
 		"format": "oxfmt --config .oxfmtrc.json --write .",
 		"format:check": "oxfmt --config .oxfmtrc.json --check .",
 		"lint:check": "oxlint --config .oxlintrc.json --deny-warnings .",
-		"test": "npm run test:src:core && npm run test:src:server && npm run test:src:bin && npm run test:policy && npm run test:config && npm run test:setup && npm run test:guides",
+		"test": "npm run test:src:core && npm run test:src:server && npm run test:src:bin && npm run test:policy && npm run test:config && npm run test:setup && npm run test:skills && npm run test:guides",
 		"test:src:core": "vitest run --config vite.config.ts --no-cache --reporter=dot --project src:core",
 		"test:src:server": "vitest run --config vite.config.ts --no-cache --reporter=dot --project src:server",
 		"test:src:bin": "vitest run --config vite.config.ts --no-cache --reporter=dot --project src:bin",
 		"test:policy": "vitest run --config vite.config.ts --no-cache --reporter=dot --project policy",
 		"test:config": "vitest run --config vite.config.ts --no-cache --reporter=dot --project config",
 		"test:guides": "node --experimental-strip-types tests/guides.test.ts",
+		"test:skills": "vitest run --config vite.config.ts --no-cache --reporter=dot --project skills",
 		"test:distribution": "vitest run --config vite.config.ts --no-cache --reporter=dot --project distribution",
 		"test:probe": "vitest run --config vite.config.ts --no-cache --reporter=verbose --project probe",
 		"test:bench": "vitest bench --config vite.config.ts --no-cache --project probe",
 		"test:setup": "vitest run --config vite.config.ts --no-cache --reporter=dot --project setup",
-		"build": "npm run clean && npm run build:src && npm run build:host && npm run build:inventory",
+		"build": "npm run clean && npm run build:src && npm run build:host && npm run build:skills && npm run build:inventory",
 		"build:src": "npm run build:src:core && npm run build:src:server && npm run build:src:bin",
 		"build:src:core": "vite build --config configs/src/vite.core.config.ts && npm run copy dist/src/core/index.d.ts dist/src/core/index.d.cts",
 		"build:src:server": "vite build --config configs/src/vite.server.config.ts && npm run copy dist/src/server/index.d.ts dist/src/server/index.d.cts",
 		"build:src:bin": "vite build --config configs/src/vite.bin.config.ts",
 		"build:host": "node -e \"import('./dist/src/server/index.js').then((m)=>{const n=m.stageHost(process.cwd(),'dist/host',{report: (message) => console.error(message)}).length;console.log('build-host: staged '+n+' file(s) into dist/host')})\"",
 		"build:inventory": "node -e \"import('./dist/src/server/index.js').then((m)=>{const p=process.argv[1]??'host.json',n=m.stageInventory(process.cwd(),p).entries.length;console.log('build-inventory: staged '+n+' file(s) into '+p)})\"",
+		"build:skills": "tsc -p configs/agents/tsconfig.skills.json --noEmit false --allowImportingTsExtensions false --rewriteRelativeImportExtensions --declaration false --sourceMap false --rootDir .agents/skills --outDir dist/agents/skills && npm run copy .agents/templates/brief.md dist/agents/templates/brief.md",
 		"prepack": "npm run build",
 		"prepublishOnly": "npm run format:check && npm run lint:check && npm run check && npm run build && npm test && npm run test:distribution -- --mode release"
 	},
 	dependencies: {
 		"@orkestrel/console": "^0.0.14",
-		"@orkestrel/contract": "^0.0.17",
+		"@orkestrel/contract": "^0.0.18",
 		"@orkestrel/emitter": "^0.0.10",
 		"@orkestrel/markdown": "^0.0.15",
 		"@orkestrel/process": "^0.0.13",
 		"@orkestrel/template": "^0.0.8"
 	},
 	devDependencies: {
-		"@microsoft/api-extractor": "^7.59.1",
+		"@microsoft/api-extractor": "^7.59.3",
 		"@orkestrel/guide": "^0.0.20",
 		"@orkestrel/html": "^0.0.10",
 		"@orkestrel/probe": "^0.0.16",
-		"@orkestrel/test": "^0.0.20",
-		"@types/node": "^26.5.1",
+		"@orkestrel/test": "^0.0.24",
+		"@types/node": "^26.6.3",
 		"@vitest/browser-playwright": "^4.1.11",
-		"oxfmt": "^0.68.0",
-		"oxlint": "^1.83.0",
+		"oxfmt": "^0.71.0",
+		"oxlint": "^1.86.0",
 		"playwright": "^1.63.0",
 		"typescript": "^6.0.3",
-		"vite": "^8.3.0",
+		"vite": "^8.3.1",
 		"vitest": "^4.1.11"
 	},
 	engines: { "node": ">=22.18.0" }
@@ -257,8 +261,8 @@ var HOST_PATHS = Object.freeze([
 * Staging walks these beside {@link HOST_PATHS}, so a release ships them and a
 * reader reaches them two ways: a scaffold checkout sitting beside the
 * repository, or the `node_modules/@orkestrel/scaffold/dist/host/` root inside
-* the installed package. The `AGENTS.md` and `CLAUDE.md` pointers scaffold plans
-* are what name each location.
+* the installed package. The `AGENTS.md` pointer scaffold plans is what names
+* each location.
 *
 * This list, {@link HOST_PATHS}, and {@link REFERENCE_PATHS} are disjoint by
 * prefix in every direction: no member equals or sits beneath another list's
@@ -267,18 +271,22 @@ var HOST_PATHS = Object.freeze([
 * name twice, which refuses the stage.
 *
 * The plan claims paths inside the canon deliberately, and each has a reason.
-* `blueprintToDocumentArtifacts` claims `AGENTS.md` and `CLAUDE.md` as this
-* package's own template pointers. `blueprintToHostArtifacts` claims
+* `blueprintToDocumentArtifacts` claims `AGENTS.md` as this package's own
+* template pointer. `blueprintToHostArtifacts` claims
 * {@link CATALOG_AGENT_PATH}, because the catalog verb refuses a target that
 * lacks the file and repair restores its absence.
 *
 * A target therefore holds a file at a canon path only where the plan claims it.
 * That is the rule every verb obeys, and it is what makes a copy found anywhere
-* else superseded.
+* else superseded. A member this checkout no longer holds, `CLAUDE.md` since
+* Claude Code began reading `AGENTS.md` directly, stays listed for exactly that
+* reason: the stager ships nothing for it, `audit` reports a target's copy
+* `foreign`, and `overwrite` deletes it.
 */
 var CANON_PATHS = Object.freeze([
 	"AGENTS.md",
 	"CLAUDE.md",
+	".claude/AGENTS.md",
 	".mcp.json",
 	".agents/orchestration.md",
 	".agents/skills",
@@ -400,6 +408,26 @@ var CATALOG_OPENING_MARKER = "<!-- orkestrel:catalog -->";
 * refused rather than rewritten.
 */
 var CATALOG_CLOSING_MARKER = "<!-- /orkestrel:catalog -->";
+/**
+* Lists the package-facing skills a target receives pointers for, frozen and alphabetical.
+*
+* @remarks
+* `blueprintToHostArtifacts` plans, for each name, the Claude bridge, the Codex
+* sidecar, and the derived `SKILL.md` pointer, so every harness discovers the
+* skill while its body, references, and scripts stay in the installed package.
+* `orkestrel-align`, `orkestrel-dispatch`, `orkestrel-publish`, and
+* `orkestrel-scout` are excluded because they run from the scaffold checkout
+* and a target is not an orchestration host.
+*/
+var TARGET_SKILL_NAMES = Object.freeze([
+	"enterprise-bootstrap",
+	"orkestrel-build",
+	"orkestrel-debrief",
+	"orkestrel-falsify",
+	"orkestrel-harden",
+	"orkestrel-journey",
+	"orkestrel-polish"
+]);
 /** Names the inventory skeleton a workspace with declared service vendors is given once. */
 var SERVICE_SCRIPT_PATH = "scripts/service.sh";
 /** Names the shared Vitest global-setup module whose presence makes a workspace `global`. */
@@ -437,6 +465,8 @@ var SERVICE_TEST_INCLUDE = "tests/service/**/*.test.ts";
 var SHOWCASE_CONFIG_PATH = "configs/app/vite.showcase.config.ts";
 /** Names the Vite wrapper whose presence makes a workspace `journey`. */
 var JOURNEY_CONFIG_PATH = "configs/app/vite.journey.config.ts";
+/** Names the TypeScript wrapper whose presence makes a workspace `skills`. */
+var SKILLS_CONFIG_PATH = "configs/agents/tsconfig.skills.json";
 /** Matches the bare workspace name syntax: lowercase alphanumeric with hyphens, letter first. */
 var NAME_PATTERN = /^[a-z][a-z0-9-]*$/;
 /**
@@ -713,7 +743,11 @@ const resolve = {
 // override receives that record in the same position. A \`UserConfig\` declares \`mode\`
 // but not \`command\`, and the invocation record always carries both, so a value
 // carrying the pair is that record rather than an override. The merge returns the
-// base unchanged and reports nothing. The \`tests/config.test.ts\` file drives every
+// base in the record's \`mode\` and carries none of the record's other fields. Vitest
+// runs a project that declares no \`mode\` in its own run mode, \`test\`, rather than in
+// the \`--mode\` value it was invoked with, so a distribution proof run with
+// \`--mode release\` would read \`test\` and skip where it must fail. A record whose
+// \`mode\` is not a string throws. The \`tests/config.test.ts\` file drives every
 // registered factory through it.
 //
 // \`mergeConfig\` concatenates arrays, so an override carrying \`plugins\` would otherwise
@@ -726,7 +760,13 @@ const resolve = {
 // merges it, so an override's arrays elsewhere concatenate with the base's rather than
 // replacing them.
 export function mergeOverride(base: UserConfig, override?: UserConfig): UserConfig {
-	if (override === undefined || ('command' in override && 'mode' in override)) return base
+	if (override === undefined) return base
+	if ('command' in override && 'mode' in override) {
+		if (typeof override.mode !== 'string') {
+			throw new Error('The project invocation carries no string mode')
+		}
+		return { ...base, mode: override.mode }
+	}
 	const merged: UserConfig = mergeConfig(base, override)
 	if (merged.plugins === undefined) return merged
 	const candidates = override.plugins ?? []
@@ -1135,6 +1175,25 @@ export function appShowcase(override?: UserConfig): UserConfig {
 	}
 	return mergeOverride(project, override)
 }
+`,
+		skills: `// The skill scripts this package ships as canon, each driven as a child process against a
+// scratch fixture from its mirrored proof under \`tests/agents/skills/<skill>/scripts/\`. The
+// \`configs/agents/tsconfig.skills.json\` wrapper selects the project.
+export function skills(override?: UserConfig): UserConfig {
+	const project: UserConfig = {
+		resolve,
+		test: {
+			name: { label: 'skills', color: 'blue' },
+			include: ['tests/agents/**/*.test.ts'],
+			setupFiles: ['./tests/setup.ts'],
+			environment: 'node',
+			browser: { enabled: false },
+			// Each case spawns node on a script; a census case runs \`vitest list\` over this checkout.
+			testTimeout: 60_000,
+		},
+	}
+	return mergeOverride(project, override)
+}
 `,
 		conformance: `// Where this package drifts from the official tooling it stays compatible with.
 // The subject is this package, so the proof is hermetic and stays in \`npm test\`.
@@ -1189,7 +1248,7 @@ export function service(override?: UserConfig): UserConfig {
 }
 `,
 		probe: `// A workbench, not a proof. No gate selects this project. Run in test mode by the
-// \`test:probe\` script, it collects \`tmp/probe/**/*.test.ts\`. Run in benchmark mode by the
+// \`test:probe\` script, it collects \`tmp/probes/**/*.test.ts\`. Run in benchmark mode by the
 // \`test:bench\` script, the same workbench also collects \`tests/**/*.test.ts\` for a \`bench\` block,
 // so a suite may carry a bench beside its ordinary tests without a second project. The mode
 // guard around each \`bench\` call keeps it out of test mode, so it never executes there.
@@ -1198,13 +1257,13 @@ export function probe(override?: UserConfig): UserConfig {
 		resolve,
 		test: {
 			name: { label: 'probe', color: 'black' },
-			include: ['tmp/probe/**/*.test.ts'],
+			include: ['tmp/probes/**/*.test.ts'],
 			setupFiles: ['./tests/setup.ts'],
 			environment: 'node',
 			browser: { enabled: false },
 			fileParallelism: false,
 			pool: 'threads',
-			benchmark: { include: ['tmp/probe/**/*.test.ts', 'tests/**/*.test.ts'] },
+			benchmark: { include: ['tmp/probes/**/*.test.ts', 'tests/**/*.test.ts'] },
 		},
 	}
 	return mergeOverride(project, override)
@@ -1345,6 +1404,16 @@ export function probe(override?: UserConfig): UserConfig {
 		"../../src/bin/**/*.tsx"
 	]
 }
+`,
+		skills: `{
+	"extends": "../../tsconfig.json",
+	"compilerOptions": {
+		"lib": ["ESNext"],
+		"types": ["node"]
+	},
+	"include": ["../../.agents/skills/*/scripts/*.ts"],
+	"exclude": ["../../node_modules"]
+}
 `
 	}),
 	vites: Object.freeze({
@@ -1885,7 +1954,8 @@ const TSC = createRequire(join(ROOT, 'package.json')).resolve('typescript/bin/ts
 // rather than an exit code a caller can read. Every following argument is a literal or
 // a path this file built, so the shell has nothing to escape.
 const SHELL = process.platform === 'win32'
-// \`prepublishOnly\` runs this proof as \`npm run test:distribution -- --mode release\`.
+// \`prepublishOnly\` runs this proof as \`npm run test:distribution -- --mode release\`,
+// and the root configuration's project factories carry that mode into this project.
 // Release is the publish gate, so evidence it cannot obtain fails there and skips
 // everywhere else: a gate that passes on missing evidence proves nothing.
 const RELEASE = import.meta.env.MODE === 'release'
@@ -2958,20 +3028,21 @@ Resolve every one of those paths against scaffold, never against this repository
   \`node_modules/@orkestrel/scaffold/dist/host/claude/rules/\` directory, and the
   \`node_modules/@orkestrel/scaffold/dist/host/agents/skills/\` directory.
 
-Every path a scaffold-supplied file names resolves the same way. The files this repository carries
+Every path a scaffold-supplied file names resolves the same way. Run a script such a file names
+through its built twin: replace \`node .agents/skills/\` with
+\`node node_modules/@orkestrel/scaffold/dist/agents/skills/\` and the \`.ts\` extension with \`.js\`,
+because Node runs no \`.ts\` file under \`node_modules\`. The files this repository carries
 — the \`.claude/agents/orkestrel.md\` catalog file, the \`.claude/settings.json\` permission file,
-and the bench scripts under \`scripts/\` — are this repository's own copies and resolve here.
+the bench scripts under \`scripts/\`, and the skill pointers under \`.agents/skills/\` and
+\`.claude/skills/\`, which name the canonical skills and how to run their scripts — are this
+repository's own copies and resolve here.
+
+In Claude Code, also read the Claude bridge: \`../scaffold/.claude/AGENTS.md\` beside a checkout, or
+\`node_modules/@orkestrel/scaffold/dist/host/claude/AGENTS.md\` from the installed copy. Keep no
+\`CLAUDE.md\` in this repository; one stops Claude Code from reading this file.
 
 Edit none of the scaffold-owned files here. The \`scaffold repair\` command restores them, so a
 change to one is a commit in the scaffold repository followed by a release.
-`,
-		claude: `# CLAUDE.md
-
-Read the \`AGENTS.md\` file in this repository first. It names the coding and orchestration
-authority and where to read each contract.
-
-This file imports nothing. An \`@path\` import inlines the imported file into every context that
-loads it, which is the cost this pointer removes.
 `
 	}),
 	guides: Object.freeze({ readme: `# Guides
@@ -2990,12 +3061,28 @@ loads it, which is the cost this pointer removes.
 
 {{directories}}
 ` }),
-	orchestration: Object.freeze({ service: `#!/usr/bin/env sh
+	orchestration: Object.freeze({
+		skill: `
+# Load the canonical skill
+
+This file is a pointer the \`@orkestrel/scaffold\` package writes into every fleet workspace; the
+skill itself ships with that package. Read the canonical \`SKILL.md\` completely and follow it:
+
+- beside a scaffold checkout, \`../scaffold/.agents/skills/{{name}}/SKILL.md\`;
+- otherwise, \`node_modules/@orkestrel/scaffold/dist/host/agents/skills/{{name}}/SKILL.md\`.
+
+Resolve every path the canonical skill names against the same root; under \`node_modules\` each
+segment drops its opening dot. Run a script the skill names through its built twin, as this
+repository's \`AGENTS.md\` states. This pointer carries no process of its own; \`AGENTS.md\`, the applicable
+rules, and the canonical skill remain authoritative in that order.
+`,
+		service: `#!/usr/bin/env sh
 set -eu
 
 printf '%s\\n' \\
 {{vendors}}
-` })
+`
+	})
 });
 //#endregion
 //#region src/core/errors.ts
@@ -3320,7 +3407,8 @@ var isBlueprint = (0, _orkestrel_contract.recordOf)({
 	vendors: (0, _orkestrel_contract.andOf)(isCollection, (0, _orkestrel_contract.arrayOf)(_orkestrel_contract.isString)),
 	global: _orkestrel_contract.isBoolean,
 	showcase: _orkestrel_contract.isBoolean,
-	journey: _orkestrel_contract.isBoolean
+	journey: _orkestrel_contract.isBoolean,
+	skills: _orkestrel_contract.isBoolean
 }, ["description"]);
 /**
 * Narrows a value to an {@link Artifact}.
@@ -3345,8 +3433,13 @@ var isArtifact = (0, _orkestrel_contract.unionOf)((0, _orkestrel_contract.record
 	ownership: (0, _orkestrel_contract.literalOf)("presence", "birth"),
 	environment: isEnvironment,
 	origin: (0, _orkestrel_contract.literalOf)("host"),
-	source: isPath
-}, ["environment", "source"]), (0, _orkestrel_contract.recordOf)({
+	source: isPath,
+	pointer: _orkestrel_contract.isBoolean
+}, [
+	"environment",
+	"source",
+	"pointer"
+]), (0, _orkestrel_contract.recordOf)({
 	path: isPath,
 	group: isGroup,
 	ownership: (0, _orkestrel_contract.literalOf)("content"),
@@ -3845,10 +3938,11 @@ function isDeferredPath(path) {
 * boundary, so a sibling whose name opens with a member's name —
 * `.claude/rulesets` beside `.claude/rules` — stays outside.
 *
-* Membership answers where a path's bytes are staged, not whether a plan claims
-* it. A plan claims `AGENTS.md`, `CLAUDE.md`, and {@link CATALOG_AGENT_PATH} at
-* canon paths deliberately, so a consumer deciding whether to write, restore, or
-* remove a path reads the plan rather than this predicate.
+* Membership answers whether scaffold owns the path, not whether a plan claims
+* it. A plan claims `AGENTS.md` and {@link CATALOG_AGENT_PATH} at canon paths
+* deliberately, so a consumer deciding whether to write, restore, or remove a
+* path reads the plan rather than this predicate. A member the checkout no
+* longer holds is still canon, so a copy a target keeps reports as foreign.
 *
 * @example
 * ```ts
@@ -4644,6 +4738,36 @@ function manifestToDependencies(manifest) {
 		peer: (0, _orkestrel_contract.limitEntries)(peer, MAX_COLLECTION_ITEMS)
 	};
 }
+/**
+* Renders the `SKILL.md` pointer a target carries in place of a canonical skill.
+*
+* @param canonical - The canonical `SKILL.md` text, which opens with a frontmatter block.
+* @param name - The skill directory name the pointer body names.
+* @returns The canonical frontmatter block copied line for line, from its opening `---` line through
+* its closing `---` line, then the filled `ARTIFACT_TEMPLATES.orchestration.skill` body, with `\n`
+* line endings; `undefined` when the canonical text does not open with a complete frontmatter block.
+*
+* @remarks
+* The frontmatter is copied rather than rewritten, so every harness that
+* discovers the pointer reads the canonical `name` and `description` and
+* triggers the skill exactly as the canonical file would. A CRLF canonical
+* text yields the same pointer as its LF form.
+*
+* @example
+* ```ts
+* import { renderSkillPointer } from '@orkestrel/scaffold'
+*
+* renderSkillPointer('---\nname: orkestrel-harden\ndescription: Hardens a package.\n---\n\n# Harden\n', 'orkestrel-harden')?.startsWith('---\nname: orkestrel-harden\ndescription: Hardens a package.\n---\n\n# Load the canonical skill\n') // true
+* renderSkillPointer('# Harden\n', 'orkestrel-harden') // undefined
+* ```
+*/
+function renderSkillPointer(canonical, name) {
+	const lines = canonical.split(/\r\n|\n/u);
+	if (lines[0] !== "---") return void 0;
+	const closing = lines.indexOf("---", 1);
+	if (closing === -1) return void 0;
+	return `${lines.slice(0, closing + 1).join("\n")}\n${(0, _orkestrel_template.fillTemplate)(ARTIFACT_TEMPLATES.orchestration.skill, { name })}`;
+}
 //#endregion
 //#region src/core/compilers.ts
 /**
@@ -4860,7 +4984,8 @@ function blueprintToScripts(blueprint) {
 		check: [
 			"tsc --noEmit --project tsconfig.json",
 			...compiles ? ["npm run check:src"] : [],
-			...blueprint.app.length > 0 ? ["npm run check:app"] : []
+			...blueprint.app.length > 0 ? ["npm run check:app"] : [],
+			...blueprint.skills ? ["npm run check:skills"] : []
 		].join(" && ")
 	};
 	if (compiles) {
@@ -4872,6 +4997,7 @@ function blueprintToScripts(blueprint) {
 		scripts["check:app"] = blueprint.app.map((environment) => `npm run check:app:${environment}`).join(" && ");
 		for (const environment of blueprint.app) scripts[`check:app:${environment}`] = environment === "browser" ? "vue-tsc --noEmit -p configs/app/tsconfig.browser.json" : `tsc --noEmit -p configs/app/tsconfig.${environment}.json`;
 	}
+	if (blueprint.skills) scripts["check:skills"] = `tsc --noEmit -p ${SKILLS_CONFIG_PATH}`;
 	scripts.test = [
 		...compiles ? ["npm run test:src"] : [],
 		...blueprint.app.length > 0 ? ["npm run test:app"] : [],
@@ -4880,6 +5006,7 @@ function blueprintToScripts(blueprint) {
 		"npm run test:config",
 		...blueprint.setup.includes("node") ? ["npm run test:setup"] : [],
 		...blueprint.setup.includes("browser") ? ["npm run test:setup:browser"] : [],
+		...blueprint.skills ? ["npm run test:skills"] : [],
 		...blueprint.guides ? ["npm run test:guides"] : [],
 		...blueprint.conformance ? ["npm run test:conformance"] : [],
 		...integrates ? ["npm run test:integration"] : [],
@@ -4903,6 +5030,7 @@ function blueprintToScripts(blueprint) {
 	if (blueprint.setup.includes("node")) scripts["test:setup"] = `${vitest} --project setup`;
 	if (blueprint.setup.includes("browser")) scripts["test:setup:browser"] = `${vitest} --project setup:browser`;
 	if (blueprint.journey && blueprint.app.includes("browser")) scripts["test:journey"] = `vitest run --config ${JOURNEY_CONFIG_PATH} --no-cache --reporter=dot`;
+	if (blueprint.skills) scripts["test:skills"] = `${vitest} --project skills`;
 	if (blueprint.guides) scripts["test:guides"] = `node --experimental-strip-types ${GUIDES_TEST_PATH}`;
 	if (blueprint.conformance) scripts["test:conformance"] = `${vitest} --project conformance`;
 	scripts["test:probe"] = "vitest run --config vite.config.ts --no-cache --reporter=verbose --project probe";
@@ -4959,7 +5087,7 @@ function blueprintToScripts(blueprint) {
 * Every direct `test:<project>` script is writable, together with the probe and
 * benchmark workbench scripts. A workspace carrying guides adds `test:guides`,
 * whose package-owned entry runs the guides project and handles explicit parity
-* rewrites. Publishing adds the pack and publication lifecycle scripts.
+* rewrites, and one carrying skills adds `test:skills`. Publishing adds the pack and publication lifecycle scripts.
 * Aggregate test scripts and
 * maintainer-owned gate chains stay outside the region.
 *
@@ -5293,6 +5421,10 @@ function blueprintToRootVite(blueprint) {
 		factories.push(CONFIG_TEMPLATES.factories.guides);
 		projects.push("guides");
 	}
+	if (blueprint.skills) {
+		factories.push(CONFIG_TEMPLATES.factories.skills);
+		projects.push("skills");
+	}
 	if (blueprint.conformance) {
 		factories.push(CONFIG_TEMPLATES.factories.conformance);
 		projects.push("conformance");
@@ -5447,6 +5579,13 @@ ${paths.join("\n")}
 		environment: "browser",
 		content: CONFIG_TEMPLATES.vites.app.journey
 	});
+	if (blueprint.skills) artifacts.push({
+		path: SKILLS_CONFIG_PATH,
+		group: "configs",
+		ownership: "content",
+		origin: "template",
+		content: CONFIG_TEMPLATES.tsconfigs.skills
+	});
 	return artifacts;
 }
 /**
@@ -5733,21 +5872,23 @@ function blueprintToGuideArtifacts(blueprint) {
 *
 * @param blueprint - The workspace specification.
 * @returns The birth-owned package front page and the content-owned `AGENTS.md`
-* and `CLAUDE.md` pointers.
+* pointer.
 *
 * @remarks
 * The front page is the workspace's own prose, so it is written once and left
-* alone from then on. The pointers are scaffold's, so they are content-owned and
-* restored whenever they drift.
+* alone from then on. The pointer is scaffold's, so it is content-owned and
+* restored whenever it drifts.
 *
-* A pointer is planned here rather than vendored because `stageHost` refuses two
-* vendored paths at one storage name, and `AGENTS.md` and `CLAUDE.md` already
-* store the canon a release ships. Planning them as this package's own content
-* leaves each path with one claimant.
+* The pointer is planned here rather than vendored because `stageHost` refuses two
+* vendored paths at one storage name, and `AGENTS.md` already stores the canon a
+* release ships. Planning it as this package's own content leaves the path with
+* one claimant. No `CLAUDE.md` is planned: a target holding one stops Claude Code
+* from reading `AGENTS.md`, so the path stays canon without a claimant, `audit`
+* reports a copy `foreign`, and `overwrite` deletes it.
 *
-* Neither pointer carries a varying span, so neither is filled: a workspace's
-* name never reaches the text, and the paths a reader follows are the same in
-* every target.
+* The pointer carries no varying span, so it is not filled: a workspace's name
+* never reaches the text, and the paths a reader follows are the same in every
+* target.
 *
 * @example
 * ```ts
@@ -5755,39 +5896,29 @@ function blueprintToGuideArtifacts(blueprint) {
 *
 * const blueprint = createBlueprint('router', { src: ['core'] })
 *
-* blueprintToDocumentArtifacts(blueprint).map((artifact) => artifact.path) // ['README.md', 'AGENTS.md', 'CLAUDE.md']
+* blueprintToDocumentArtifacts(blueprint).map((artifact) => artifact.path) // ['README.md', 'AGENTS.md']
 * ```
 */
 function blueprintToDocumentArtifacts(blueprint) {
 	const publishes = blueprint.src.length > 0;
 	const name = publishes ? `@orkestrel/${blueprint.name}` : blueprint.name;
 	const description = blueprint.description ?? (publishes ? `The ${name} package.` : `The ${name} application.`);
-	return [
-		{
-			path: "README.md",
-			group: "docs",
-			ownership: "birth",
-			origin: "template",
-			content: (0, _orkestrel_template.fillTemplate)(ARTIFACT_TEMPLATES.docs.readme, {
-				package: name,
-				description
-			})
-		},
-		{
-			path: "AGENTS.md",
-			group: "docs",
-			ownership: "content",
-			origin: "template",
-			content: ARTIFACT_TEMPLATES.docs.agents
-		},
-		{
-			path: "CLAUDE.md",
-			group: "docs",
-			ownership: "content",
-			origin: "template",
-			content: ARTIFACT_TEMPLATES.docs.claude
-		}
-	];
+	return [{
+		path: "README.md",
+		group: "docs",
+		ownership: "birth",
+		origin: "template",
+		content: (0, _orkestrel_template.fillTemplate)(ARTIFACT_TEMPLATES.docs.readme, {
+			package: name,
+			description
+		})
+	}, {
+		path: "AGENTS.md",
+		group: "docs",
+		ownership: "content",
+		origin: "template",
+		content: ARTIFACT_TEMPLATES.docs.agents
+	}];
 }
 /**
 * Compiles the blueprint-dependent orchestration artifacts.
@@ -5847,13 +5978,20 @@ function blueprintToOrchestrationArtifacts(blueprint) {
 * staged bytes; and the `.claude/agents` directory in `CANON_PATHS` is what
 * stages those bytes, so listing the file in `HOST_PATHS` as well would claim one
 * storage name twice and refuse the stage. The rest of the canon a target reads
-* from the installed package, at the locations the `AGENTS.md` and `CLAUDE.md`
-* pointers {@link blueprintToDocumentArtifacts} emits name.
+* from the installed package, at the locations the `AGENTS.md` pointer
+* {@link blueprintToDocumentArtifacts} emits names.
 *
 * The {@link SEED_GUIDE_PATHS} mirrors are claimed explicitly
 * from `REFERENCE_PATHS`. The target's own guide is excluded by
 * {@link selectHostPaths}; the remaining reference guides grant no target claim.
 *
+* The skill pointer set follows, for each name in {@link TARGET_SKILL_NAMES}:
+* the `.claude/skills/<name>/SKILL.md` bridge and the
+* `.agents/skills/<name>/agents/openai.yaml` sidecar as copies, then the
+* `.agents/skills/<name>/SKILL.md` pointer with `pointer` set, whose bytes
+* hydration derives from the canonical skill. A blueprint with `skills` set
+* ships its own skill canon, so it plans no pointer set.
+*
 * @example
 * ```ts
 * import { blueprintToHostArtifacts, createBlueprint } from '@orkestrel/scaffold'
@@ -5862,15 +6000,44 @@ function blueprintToOrchestrationArtifacts(blueprint) {
 *
 * blueprintToHostArtifacts(blueprint).some((artifact) => artifact.path === 'tests/guides.test.ts') // false
 * blueprintToHostArtifacts(blueprint).some((artifact) => artifact.path === 'guides/router.md') // false
+* blueprintToHostArtifacts(blueprint).find((artifact) => artifact.path === '.agents/skills/orkestrel-harden/SKILL.md')?.pointer // true
 * ```
 */
 function blueprintToHostArtifacts(blueprint) {
-	return [...selectHostPaths([...HOST_PATHS, ...SEED_GUIDE_PATHS], blueprint.name), CATALOG_AGENT_PATH].map((path) => ({
+	const vendored = [...selectHostPaths([...HOST_PATHS, ...SEED_GUIDE_PATHS], blueprint.name), CATALOG_AGENT_PATH].map((path) => ({
 		path,
 		group: inferGroup(path),
 		ownership: "presence",
 		origin: "host"
 	}));
+	if (blueprint.skills) return vendored;
+	const skills = TARGET_SKILL_NAMES.flatMap((name) => {
+		const bridge = `.claude/skills/${name}/SKILL.md`;
+		const sidecar = `.agents/skills/${name}/agents/openai.yaml`;
+		const pointer = `.agents/skills/${name}/SKILL.md`;
+		return [
+			{
+				path: bridge,
+				group: inferGroup(bridge),
+				ownership: "presence",
+				origin: "host"
+			},
+			{
+				path: sidecar,
+				group: inferGroup(sidecar),
+				ownership: "presence",
+				origin: "host"
+			},
+			{
+				path: pointer,
+				group: inferGroup(pointer),
+				ownership: "presence",
+				origin: "host",
+				pointer: true
+			}
+		];
+	});
+	return [...vendored, ...skills];
 }
 /**
 * Replaces the content of every drafted artifact an override names.
@@ -6836,7 +7003,8 @@ function createBlueprint(name, input) {
 		vendors: input?.vendors ?? [],
 		global: input?.global ?? false,
 		showcase: input?.showcase ?? false,
-		journey: input?.journey ?? false
+		journey: input?.journey ?? false,
+		skills: input?.skills ?? false
 	}));
 	if (blueprint === void 0) throw new ScaffoldError("INVALID", "The filled record is not a blueprint.", { name });
 	return blueprint;
@@ -7210,10 +7378,12 @@ exports.SERVICE_SETUP_PATH = SERVICE_SETUP_PATH;
 exports.SERVICE_TEST_INCLUDE = SERVICE_TEST_INCLUDE;
 exports.SHOWCASE_CONFIG_PATH = SHOWCASE_CONFIG_PATH;
 exports.SHOWCASE_DEV_DEPENDENCIES = SHOWCASE_DEV_DEPENDENCIES;
+exports.SKILLS_CONFIG_PATH = SKILLS_CONFIG_PATH;
 exports.SOURCE_BROWSER_DEV_DEPENDENCIES = SOURCE_BROWSER_DEV_DEPENDENCIES;
 exports.SRC_MATRIX = SRC_MATRIX;
 exports.ScaffoldError = ScaffoldError;
 exports.TAB_WIDTH = TAB_WIDTH;
+exports.TARGET_SKILL_NAMES = TARGET_SKILL_NAMES;
 exports.VERSION_PATTERN = VERSION_PATTERN;
 exports.WORKSPACE_DEV_ENGINES = WORKSPACE_DEV_ENGINES;
 exports.WORKSPACE_OWNED_PATHS = WORKSPACE_OWNED_PATHS;
@@ -7293,6 +7463,7 @@ exports.pathToCondition = pathToCondition;
 exports.planToFindings = planToFindings;
 exports.planToHash = planToHash;
 exports.planToSummary = planToSummary;
+exports.renderSkillPointer = renderSkillPointer;
 exports.replaceManifestRanges = replaceManifestRanges;
 exports.replaceManifestScripts = replaceManifestScripts;
 exports.replacePlanRanges = replacePlanRanges;